...
- Check whether the "Read items in all site collections" permission is granted to the app registration in Azure (see Add Application to Azure Active Directory (v 1.2).
- Check for your personal Global Admin Account which permission level it has in the root site collection and whether the "Use Remote Interfaces" is granted for this permission level.
...